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AMENDMENTS TO THE CLAIMS 
|T-10. (Canceled)^ 

1 11. (Currently amended) The -In a system comprising an application, a 

2 framework, and an implementation class which provides an implementation for a 

3 particular service, a method of claim L performed by the framework, comprising: 

4 receiving a request from an application for a customized implementation of a 

5 particular service: 

6 instantiating an implementation class which provides an implementation for the 

7 particular service to give rise to an implementation instance: 

8 determining a set of zero or more restrictions to be imposed on said customized 

9 implementation: 

10 instantiating a wrapper class to give rise to a wrapper instance, said wrapper 

11 instance comprising enforcement logic for enforcing said restrictions: 

12 encapsulating said implementation instance and said restrictions within said 

13 wrapper instance: and 

14 providing said wrapper instance to the application as said customized 

15 implementation: 

16 wherein said wrapper instance comprises one or more invocable methods, 

17 wherein said implementation instance comprises one or more invocable methods, and 

18 wherein encapsulating comprises: 

19 mapping the one or more invocable methods of said wrapper instance to the one 

20 or more invocable methods of said implementation instance. 
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1 12. (Currently amended) The method of claim il, wherein instantiating the 

2 implementation class comprises: 

3 determining whether the implementation class is authentic; and 

4 in response to a determination that the implementation class is authentic, 

5 instantiating the implementation class to give rise to said implementation instance. 

1 13. (Original) The method of claim 12, wherein the implementation class has 

2 a digital signature associated therewith, and wherein determining whether the 
(3 implementation class is authentic comprises: 
4 verifying said digital signature. 

I 

1 14. (Original) The method of claim 12, wherein the implementation class 

2 authenticates the framework prior to giving rise to said implementation instance. 

1 15. (Currently amended) The method of claim 11, wherein determining the set 

2 of zero or more restrictions comprises: 

3 accessing information specifying one or more limitations; and 

4 processing said limitations to derive said restrictions. 

1 16. (Original) The method of claim 15, wherein the particular service is an 

2 encryption/decryption service, and wherein said information comprises a set of one or 

3 more default encryption limitations. 
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1 17. (Original) The method of claim 16, wherein said default encryption 

2 limitations are derived by merging multiple jurisdiction policies and extracting therefrom 

> 

3 the most restrictive encryption limitations. 



1 18. (Currently amended) The method of claim il, wherein determining the set 

2 of zero or more restrictions comprises: 

3 accessing information specifying one or more limitations; 

4 determining permissions, if any, granted to the application; and 

5 reconciling said limitations and said permissions to derive said restrictions. 

ryJ^ijP 19. (Original) The method of claim 18, wherein said limitations and said 

j 2 permissions are reconciled to derive restrictions which are least restrictive. 

1 20. (Original) The method of claim 18, wherein the particular service is an 

2 encryption/decryption service, and wherein said information comprises a set of one or 

3 more default encryption limitations, and a set of zero or more exempt encryption 

4 limitations which apply when one or more exemption mechanisms are implemented. 



1 21. (Original) The method of claim 20, wherein said default encryption 

2 limitations and said exempt encryption hmitations are derived by merging multiple 

3 jurisdiction policies and extracting therefrom the most restrictive encryption limitations. 

1 22. (Original) The method of claim 20, wherein reconciling said limitations 

2 and said permissions comprises: 
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3 determining whether the application has been granted any permissions; and 

4 in response to a determination that the application has not been granted any 

5 permissions, deriving said restrictions from said set of default encryption limitations. 



1 23. (Original) The method of claim 20, wherein reconciling said limitations 

2 and said permissions comprises: 

3 determining whether the application has been granted any permissions which 

4 require implementation of a particular exemption mechanism; 

'5 in response to a determination that the application has been granted a permission 

6 which requires implementation of a particular exemption mechanism, determining 

I 7 whether said exempt encryption limitations allow said particular exemption mechanism 

8 to be implemented; and 

9 in response to a determination that said exempt encryption limitations allow said 

10 particular exemption mechanism to be implemented, deriving said restrictions from said 

1 1 set of exempt encryption limitations. 

1 

1 34. (Currently amended) ¥be -In a svstem comprising an application and an 

2 implementation class which provides an implementation for a particular service, a 

3 framework of claim 21, comprising: 

4 a mechanism for receiving a request from an application for a customized 

5 implementation of a particular service; 
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6 a mechanism for instantiating an implementation class which provides an 

7 implementation for the particular service to give rise to an implementation instance: 

8 a mechanism for determining a set of zero or more restrictions to be imposed on 

9 said customized implementation; 

10 a mechanism for instantiating a wrapper class to give rise to a wrapper instance, 

11 said wrapper instance comprising enforcement logic for enforcing said restrictions; 

12 a mechanism for encapsulating said implementation instance and said restrictions 

13 within said wrapper instance; and 

14 a mechanism for providing said wrapper instance to the application as said 

15 customized implementation; 

16 wherein said wrapper instance comprises one or more in vocable methods, 

17 wherein said implementation instance comprises one or more invocable methods, and 

18 wherein the mechanism for encapsulating comprises: 

19 a mechanism for mapping the one or more invocable methods of said wrapper 

20 instance to the one or more invocable methods of said implementation instance. 

1 35. (Currently amended) The framework of claim 3434, wherein the 

2 mechanism for instantiating the implementation class comprises: 

3 a mechanism for determining whether the implementation class is authentic; and 

4 a mechanism for instantiating, in response to a determination that the 

5 implementation class is authentic, the implementation class to give rise to said 

6 implementation instance. 
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1 36. (Original) The framework of claim 35, wherein the implementation class 

2 has a digital signature associated therewith, and wherein the mechanism for determining 

3 whether the implementation class is authentic comprises: 

4 a mechanism for verifying said digital signature. 

1 37. (Original) The framework of claim 35, wherein the implementation class 

2 authenticates the framework prior to giving rise to said implementation instance. 

1 38. (Currently amended) The framework of claim 3434, wherein the 

2 mechanism for determining the set of zero or more restrictions comprises: 

3 a mechanism for accessing information specifying one or more limitations; and 

4 a mechanism for processing said limitations to derive said restrictions. 

1 39. (Original) The framework of claim 38, wherein the particular service is an 

2 encryption/decryption service, and wherein said information comprises a set of one or 

3 more default encryption limitations. 

1 40. (Original) The framework of claim 39, wherein said default encryption 

2 limitations are derived by merging multiple jurisdiction policies and extracting therefrom 

3 the most restrictive encryption limitations. 

1 41. (Currently amended) The framework of claim 3434, wherein the 

2 mechanism for determining the set of zero or more restrictions comprises: 

3 a mechanism for accessing information specifying one or more limitations; 

4 a mechanism for determining permissions, if any, granted to the application; and 
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5 a mechanism for reconciling said limitations and said permissions to derive said 

6 restrictions. 

1 42. (Original) The framework of claim 41, wherein said limitations and said 

2 permissions are reconciled to derive restrictions which are least restrictive. 

1 43. (Original) The framework of claim 41, wherein the particular service is an 

2 encryption/decryption service, and wherein said information comprises a set of one or 

3 more default encryption limitations, and a set of zero or more exempt encryption 

4 limitations which apply when one or more exemption mechanisms are implemented. 

1 44. (Original) The framework of claim 43, wherein said default encryption 

2 limitations and said exempt encryption limitations are derived by merging multiple 

3 jurisdiction policies and extracting therefrom the most restrictive encryption limitations. 

1 45. (Original) The framework of claim 43, wherein the mechanism for 

2 reconciling said limitations and said permissions comprises: 

3 a mechanism for determining whether the application has been granted any 

4 permissions; and 

5 a mechanism for deriving, in response to a determination that the application has 

6 not been granted any permissions, said restrictions from said set of default encryption 

7 limitations. 
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1 46. (Original) The framework of claim 43, wherein the mechanism for 

2 reconciling said limitations and said permissions comprises: 

3 a mechanism for determining whether the application has been granted any 

4 permissions which require implementation of a particular exemption mechanism; 

5 a mechanism for determining, in response to a determination that the application 

6 has been granted a permission which requires implementation of a particular exemption 

7 mechanism, whether said exempt encryption limitations allow said particular exemption 

8 mechanism to be implemented; and 

9 a mechanism for deriving, in response to a determination that said exempt 

10 encryption limitations allow said particular exemption mechanism to be implemented, 

1 1 said restrictions from said set of exempt encryption limitations. 

/ ^^47^6. (CanceledT^ 

1 57. (Currently amended) ¥he -In a system comprising an application and an 

2 implementation class which provides an implementation for a particular service, a 

3 computer readable medium of claim 4 7, having stored thereon instructions which, when 

4 executed bv one or more processors, cause the one or more processors to implement a 

5 framework which dynamically constructs a customized implementation, said computer 

6 readable medium comprising: 

7 instructions for causing one or more processors to receive a request from an 

8 application for a customized implementation of a particular service: 
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9 instmctions for causine one or more processors to instantiate an implementation 

10 class which provides an implementation for the particular service to give rise to an 

11 implementation instance: 

12 instructions for causing one or more processors to determine a set of zero or more 

13 restrictions to be imposed on said customized implementation; 

14 instructions for causing one or more processors to instantiate a wrapper class to 

15 give rise to a wrapper instance, said wrapper instance comprising enforcement logic for 

16 enforcing said restrictions; 

17 instructions for causing one or more processors to encapsulate said 

18 implementation instance and said restrictions within said wrapper instance; and 
instructions for causing one or more processors to provide said wrapper instance 

20 to the application as said customized implementation; 

hi wherein said wrapper instance comprises one or more invocable methods, 

22 wherein said implementation instance comprises one or more invocable methods, and 

23 wherein the instructions for causing one or more processors to encapsulate comprises: 

24 instructions for causing one or more processors to map the one or more invocable 

25 methods of said wrapper instance to the one or more invocable methods of said 

26 implementation instance. 

1 58. (Currently amended) The computer readable medium of claim 4757, 

2 wherein the instructions for causing one or more processors to instantiate the 

3 implementation class comprises: 

4 instructions for causing one or more processors to determine whether the 

5 implementation class is authentic; and 
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6 instructions for causing one or more processors to instantiate, in response to a 

7 detemnination that the implementation class is authentic, the implementation class to give 

8 rise to said implementation instance. 

1 59. (Original) The computer readable medium of claim 58, wherein the 

2 implementation class has a digital signature associated therewith, and wherein the 

3 instructions for causing one or more processors to determine whether the implementation 

4 class is authentic comprises: 

5 instructions for causing one or more processors to verify said digital signature. 



1 60. (Original) The computer readable medium of claim 58, wherein the 

2 implementation class authenticates the framework prior to giving rise to said 

3 implementation instance. 

1 61. (Currently amended) The computer readable medium of claim 4^57, 

2 wherein the instructions for causing one or more processors to determine the set of zero 

3 or morojJstrictions comprises: 

4 instructions for causing one or more processors to access information specifying 

5 one or more limitations; and 

6 instructions for causing one or more processors to process said limitations to 

7 derive said restrictions. 
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1 62. (Original) The computer readable medium of claim 61, wherein the 

2 particular service is an encryption/decryption service, and wherein said information 

3 comprises a set of one or more default encryption limitations. 



1 63. (Original) The computer readable medium of claim 62, wherein said 

2 default encryption limitations are derived by merging multiple jurisdiction policies and 

3 extracting therefrom the most restrictive encryption limitations. 



1 64. (Currently amended) The computer readable medium of claim 4^57, 

2 wherein the instructions for causing one or more processors to determine the set of zero 
or more restrictions comprises: 

4 instructions for causing one or more processors to access information specifying 

5 one or more limitations; 

6 instructions for causing one or more processors to determine permissions, if any, 

7 granted to the application; and 

8 instructions for causing one or more processors to reconcile said limitations and 

9 said permissions to derive said restrictions. 



1 65. (Original) The computer readable medium of claim 64, wherein said 

2 limitations and said permissions are reconciled to derive restrictions which are least 

3 restrictive. 

1 66. (Original) The computer readable medium of claim 64, wherein the 

2 particular service is an encryption/decryption service, and wherein said information 

3 comprises a set of one or more default encryption limitations, and a set of zero or more 
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4 exempt encryption limitations which apply when one or more exemption mechanisms are 

5 implemented. 

1 67. (Original) The computer readable medium of claim 66, wherein said 

2 default encryption limitations and said exempt encryption limitations are derived by 

3 merging multiple jurisdiction poHcies and extracting therefrom the most restrictive 

4 encryption limitations. 

1 68. (Original) The computer readable medium of claim 66, wherein the 

2 instructions for causing one or more processors to reconcile said limitations and said 
permissions comprises: 

4 instructions for causing one or more processors to determine whether the 

5 application has been granted any permissions; and 

6 instructions for causing one or more processors to derive, in response to a 

7 determination that the application has not been granted any permissions, said restrictions 

8 from said set of default encryption limitations. 



# 



1 69. (Original) The computer readable medium of claim 66, wherein the 

2 instructions for causing one or more processors to reconcile said limitations and said 

3 permissions comprises: 

4 instructions for causing one or more processors to determine whether the 

5 application has been granted any permissions which require implementation of a 

6 particular exemption mechanism; 



13 



Attorney Docket No. 15437-0109 

7 instructions for causing one or more processors to determine, in response to a 

8 determination that the application has been granted a permission which requires 

9 implementation of a particular exemption mechanism, whether said exempt encryption 

10 limitations allow said particular exemption mechanism to be implemented; and 

1 1 instructions for causing one or more processors to derive, in response to a 

12 determination that said exempt encryption limitations allow said particular exemption 

13 mechanism to be implemented, said restrictions from said set of exempt encryption 

14 limitations. 



1 70. (Currently amended) The method of claim il, wherein determining said 

set of zero or more restrictions includes determining a set of zero or more restrictions that 
3 are specific to said application. 



1 71. (Previously added) The method of claim 70, wherein determining said set 

2 of zero or more restrictions that are specific to said application includes determining a set 

3 of zero or more restrictions that are customized for said application. 



1 72. (Currently amended) The method of claim 11, wherein said set is a first 

2 set, and wherein said customized implementation is a first customized implementation, 

3 and further comprising: 

4 receiving a request from a second application for a second customized 

5 implementation of said particular service, wherein said second customized 

6 implementation differs from said first customized implementation; 
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7 instantiating said implementation class which provides said implementation for 

8 said particular service to give rise to a second implementation instance; 

9 determining a second set of zero or more restrictions to be imposed on said 

10 second customized implementation, wherein said second set differs from said first set; 

1 1 instantiating said wrapper class to give rise to a second wrapper instance, said 

12 second wrapper instance comprising enforcement logic for enforcing said second set of 

13 zero or more restrictions; 

14 encapsulating said second implementation instance and said second set of zero or 

15 more restrictions within said second wrapper instance; and 

16 providing said second wrapper instance to said second application as said second 
IT' customized implementation. 

1 73. (Currently amended) The framework of claim 3434, wherein said 

2 mechanism for determining said set of zero or more restrictions includes a mechanism for 

3 determining a set of zero or more restrictions that are specific to said application. 

1 74. (Previously added) The framework of claim 73, wherein said mechanism 

2 for determining said set of zero or more restrictions that are specific to said application 

3 includes a mechanism for determining a set of zero or more restrictions that are 

4 customized for said application. 

1 75. (Currently amended) The framework of claim 3434, wherein said set is a 

2 first set, and wherein said customized implementation is a first customized 

3 implementation, and further comprising: 
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4 a mechanism for receiving a request from a second application for a second 

5 customized implementation of said particular service, wherein said second customized 

6 implementation differs from said first customized implementation; 

7 a mechanism for instantiating said implementation class which provides said 

8 implementation for said particular service to give rise to a second implementation 

9 instance; 

10 a mechanism for determining a second set of zero or more restrictions to be 

1 1 imposed on said second customized implementation, wherein said second set differs from 

12 said first set; 

13 a mechanism for instantiating said wrapper class to give rise to a second wrapper 
instance, said second wrapper instance comprising enforcement logic for enforcing said 

15 second set of zero or more restrictions; 

16 a mechanism for encapsulating said second implementation instance and said 

17 second set of zero or more restrictions within said second wrapper instance; and 

18 a mechanism for providing said second wrapper instance to said second 

19 application as said second customized implementation. 

1 76. (Currently amended) The computer readable medium of claim 4957, 

2 wherein said instructions for determining said set of zero or more restrictions include 

3 instructions for determining a set of zero or more restrictions that are specific to said 

4 application. 

1 77. (Previously added) The computer readable medium of claim 76, wherein 

2 said instructions for determining said set of zero or more restrictions that are specific to 
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3 said application include instructions for determining a set of zero or more restrictions that 

4 are customized for said application. 

1 78. (Currently amended) The computer readable medium of claim 4957, 

2 wherein said set is a first set, and wherein said customized implementation is a first 

3 customized implementation, and further comprising: 

4 instructions for receiving a request from a second application for a second 

5 customized implementation of said particular service, wherein said second customized 

6 implementation differs from said first customized implementation; 

1 instructions for instantiating said implementation class which provides said 

8 implementation for said particular service to give rise to a second implementation 

9 instance; 

10 instructions for determining a second set of zero or more restrictions to be 

1 1 imposed on said second customized implementation, wherein said second set differs from 

12 said first set; 

13 instructions for instantiating said wrapper class to give rise to a second wrapper 

14 instance, said second wrapper instance comprising enforcement logic for enforcing said 

15 second set of zero or more restrictions; 

16 instructions for encapsulating said second implementation instance and said 

17 second set of zero or more restrictions within said second wrapper instance; and 

18 instructions for providing said second wrapper instance to said second application 

19 as said second customized implementation. 

2l 79. (New) The method of claim 11, wherein said wrapper instance is 

2 invocable by the application without further interaction with the framework. 
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1 80. (New) The method of claim 11, wherein the implementation class 

2 provides an unrestricted implementation for the particular service. 

1 81. (New) The method of claim 80, wherein the particular service is an 

2 encryption/decryption service, and wherein the unrestricted implementation provided by 

3 the implementation class is capable of using unlimited encryption/decryption parameters. 

1 82. (New) The method of claim 81, wherein the unrestricted implementation 

2 provided by the implementation class is capable of using encryption/decryption keys of 
j^^Q^ any size. 

1 83. (New) The method of claim 11, wherein said enforcement logic enforces 

2 said restrictions on said implementation instance. 

1 84. (New) The method of claim 83, wherein said enforcement logic enforces 

2 said restrictions on said implementation instance by: 

3 receiving a set of desired parameters from the application; 

4 determining whether the desired parameters exceed said restrictions; and 

5 in response to a determination that the desired parameters exceed said restrictions, 

6 preventing said implementation instance from operating. 

1 85. (New) The method of claim 84, wherein said enforcement logic is invoked 

2 upon initialization of said wrapper instance. 
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1 86. (New) The method of claim 11, wherein the system further comprises an 

2 exemption mechanism class which provides an implementation for a particular exemption 

3 mechanism, and wherein said method further comprises: 

4 instantiating the exemption mechanism class to give rise to an exemption 

5 mechanism instance; and 

6 encapsulating said exemption mechanism instance within said wrapper instance. 

1 87. (New) The method of claim 86, wherein said enforcement logic is invoked 

2 upon initialization of said wrapper instance, and when invoked, said enforcement logic: 

3 determines whether said exemption mechanism instance has been invoked; and 

4 in response to a determination that said exemption mechanism instance has not 

5 been invoked, preventing said implementation instance from operating. 

1 88. (New) The framework of claim 34, wherein said wrapper instance is 

2 invocable by the application without further interaction with the framework. 

1 89. (New) The framework of claim 34, wherein the implementation class 

2 provides an unrestricted implementation for the particular service. 

1 90. (New) The framework of claim 89, wherein the particular service is an 

2 encryption/decryption service, and wherein the unrestricted implementation provided by 

3 the implementation class is capable of using unlimited encryption/decryption parameters. 



P4490 



19 



' : ' ' > Attorney Docket No. 15437-0109 

1 91. (New) The framework of claim 90, wherein the unrestricted 

2 implementation provided by the implementation class is capable of using 

3 encryption/decryption keys of any size. 

1 92. (New) The framework of claim 34, wherein said enforcement logic 

2 enforces said restrictions on said implementation instance. 

1 93. (New) The framework of claim 92, wherein said enforcement logic 

2 enforces said restrictions on said implementation instance by: 

3 receiving a set of desired parameters from the application; 

4 determining whether the desired parameters exceed said restrictions; and 

5 in response to a determination that the desired parameters exceed said restrictions, 
f^^^-y^^ preventing said implementation instance from operating. 

94. (New) The framework of claim 93, wherein said enforcement logic is 

2 invoked upon initialization of said wrapper instance. 

1 95. (New) The framework of claim 34, wherein the system further comprises 

2 an exemption mechanism class which provides an implementation for a particular 

3 exemption mechanism, and wherein said framework further comprises: 

4 a mechanism for instantiating the exemption mechanism class to give rise to an 

5 exemption mechanism instance; and 

6 a mechanism for encapsulating said exemption mechanism instance within said 

7 wrapper instance. 
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1 96. (New) The framework of claim 95, wherein said enforcement logic is 

2 invoked upon initialization of said wrapper instance, and when invoked, said enforcement 

3 logic: 

4 determines whether said exemption mechanism instance has been invoked; and 

5 in response to a determination that said exemption mechanism instance has not 

6 been invoked, preventing said implementation instance from operating. 

1 97. (New) The computer readable medium of claim 57, wherein said wrapper 

2 instance is invocable by the application without further interaction with the framework. 

1 98. (New) The computer readable medium of claim 57, wherein the 

2 implementation class provides an unrestricted implementation for the particular service. 

1 99. (New) The computer readable medium of claim 98, wherein the particular 

2 service is an encryption/decryption service, and wherein the unrestricted implementation 

3 provided by the implementation class is capable of using unlimited encryption/decryption 

4 parameters. 

1 100. (New) The computer readable medium of claim 99, wherein the 

2 unrestricted implementation provided by the implementation class is capable of using 

3 encryption/decryption keys of any size. 

1 101. (New) The computer readable medium of claim 57, wherein said 

2 enforcement logic enforces said restrictions on said implementation instance. 
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102. (New) The computer readable medium of claim 101, wherein said 
enforcement logic enforces said restrictions on said implementation instance by: 

receiving a set of desired parameters from the application; 
determining whether the desired parameters exceed said restrictions; and 
in response to a determination that the desired parameters exceed said restrictions, 
preventing said implementation instance from operating. 

103. (New) The computer readable medium of claim 102, wherein said 
enforcement logic is invoked upon initialization of said wrapper instance. 

104. (New) The computer readable medium of claim 57, wherein the system 
further comprises an exemption mechanism class which provides an implementation for a 
particular exemption mechanism, and wherein said computer readable medium further 
comprises: 

instructions for causing one or more processors to instantiate the exemption 
mechanism class to give rise to an exemption mechanism instance; and 

instructions for causing one or more processors to encapsulate said exemption 
mechanism instance within said wrapper instance. 

105. (New) The computer readable medium of claim 104, wherein said 
enforcement logic is invoked upon initialization of said wrapper instance, and when 
invoked, said enforcement logic: 

determines whether said exemption mechanism instance has been invoked; and 
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in response to a determination that said exemption mechanism instance has not 
been invoked, preventing said implementation instance from operating. 




